Skip to content

Changelog botan (2.19.1+dfsg-2ubuntu1)

2022

botan (2.19.1+dfsg-2ubuntu1) jammy; urgency=medium

   * d/patches/remove-openssl-provider.patch: Grab patch from upstream that
     removes the openssl provider, which breaks in obscure ways with OpenSSL 3.
     (LP: #1959021)

botan (2.19.1+dfsg-2) unstable; urgency=medium

   * Upload to Sid.

botan (2.19.1+dfsg-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-18 to libbotan-2-19 .
   * Update copright file (closes: #985748).
   * Update watch file.

2021

botan (2.18.2+dfsg-1) unstable; urgency=medium

   * New upstream release:
     - remove support in OpenSSL provider for algorithms which are disabled by
       default in OpenSSL 3.0 (closes: #995639),
     - fix some test failures induced by the expiration of the trust root
       "DST Root CA X3" (closes: #997658).
   * Update watch file.
   * Update Standards-Version to 4.6.0 .

botan (2.18.1+dfsg-3) unstable; urgency=high

   * Backport security related patches:
     - new sizes for DL exponents,
     - CVE-2021-40529: avoid using short exponents with ElGamal
       (closes: #993840).

botan (2.18.1+dfsg-2) unstable; urgency=medium

   * Upload to Sid.
   * Update watch file.

botan (2.18.1+dfsg-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-17 to libbotan-2-18 .
   * Update debhelper level to 13 .
   * Update Standards-Version to 4.5.1 .

botan (2.17.3+dfsg-3) unstable; urgency=medium

   [ Helmut Grohne <helmut@subdivi.de> ]
   * Fix FTCBFS (closes: #984700):
     + Reduce Build-Depends: python3-all-dev to python3:any.
     + Pass the right flags to ./configure.py.
     + Honour DEB_BUILD_OPTIONS=nocheck.

botan (2.17.3+dfsg-2) unstable; urgency=medium

   * Update watch file.
 
   [ Helmut Grohne <helmut@subdivi.de> ]
   * Reduce Build-Depends (closes: #983016):
     + Move python3-sphinx to B-D-I.
     + Explicitly B-D: python3-docutils for rst2man no longer implied by
       python3-sphinx.

2020

botan (2.17.3+dfsg-1) unstable; urgency=medium

   * New upstream release.

botan (2.17.2+dfsg-2) unstable; urgency=medium

   * Upload to Sid.

botan (2.17.2+dfsg-1) experimental; urgency=medium

   * New upstream release.

botan (2.17.1+dfsg-1) experimental; urgency=medium

   * New upstream release.
   * Backport upstream build fix to use -mcpu=power9 for DARN instruction on
     ppc64el.

botan (2.17.0+dfsg-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-16 to libbotan-2-17 .
   * Update debhelper level to 12 .

botan (2.16.0+dfsg-2) unstable; urgency=medium

   * Upload to Sid.

botan (2.16.0+dfsg-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-15 to libbotan-2-16 .

botan (2.15.0+dfsg-2) unstable; urgency=medium

   * Upload to Sid.
   * Link documentation JavaScript files to their respective ones in
     node-html5shiv.

botan (2.15.0+dfsg-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-13 to libbotan-2-15 .

botan (2.14.0+dfsg-2) unstable; urgency=medium

   * Upload to Sid.

botan (2.14.0+dfsg-1) experimental; urgency=medium

   * Remove unclear licensed PKCS #11 headers (closes: #952951).

botan (2.14.0-1) experimental; urgency=medium

   * New upstream release.

botan (2.13.0-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-12 to libbotan-2-13 .
   * Update Standards-Version to 4.5.0 .

2019

botan (2.12.1-2) unstable; urgency=medium

   * Upload to Sid.

botan (2.12.1-1) experimental; urgency=medium

   * New upstream release.
   * Patch package to use Python 3 (closes: #936230).

botan (2.12.0-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-11 to libbotan-2-12 .
   * Update Python packaging bits.
   * Add cryptographic signature verification to watch file.
   * Update Standards-Version to 4.4.1 .

botan (2.11.0-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-9 to libbotan-2-11 .

botan (2.9.0-2) unstable; urgency=medium

   * Upload to Sid.

botan (2.9.0-1) experimental; urgency=medium

   * New upstream release.
   * Fix CVE-2018-20187: address a side channel during ECC key generation,
     which used an unblinded Montgomery ladder (closes: #918732).
   * Library transition from libbotan-2-8 to libbotan-2-9 .

botan (2.8.0-3) unstable; urgency=medium

   * Fix architecture independent build.

botan (2.8.0-2) unstable; urgency=medium

   * Upload to Sid.

botan (2.8.0-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-7 to libbotan-2-8 .
   * Fix ARM CPU detection (closes: #916970).
   * Overhaul copyright file (closes: #905335).
   * Update Standards-Version to 4.3.0 .
 
   [ Chris Lamb <lamby@debian.org> ]
   * Make the build reproducible (closes: #909476).

2018

botan (2.7.0-1) experimental; urgency=medium

   * New upstream release.
   * Library transition from libbotan-2-5 to libbotan-2-7 .
   * Update Standards-Version to 4.1.5 .

botan (2.6.0-3) unstable; urgency=high

   * Backport security related patches:
     - CVE-2018-12435: memory-cache side-channel attack on ECDSA signatures
       (closes: #901619),
     - in ECC avoid using significant words to dispatch the mult algo.
   * Update Standards-Version to 4.1.4 .

botan (2.6.0-2) unstable; urgency=medium

   * Upload to Sid.

botan (2.6.0-1) experimental; urgency=medium

   * New upstream release.
   * Drop merged patches.
   * Library transition from libbotan-2-4 to libbotan-2-5 .
   * Add watch file.
 
   [ Helmut Grohne <helmut@subdivi.de> ]
   * Use multiarch paths (closes: #895447).

botan (2.4.0-6) unstable; urgency=high

   * Backport CVE-2018-9860 security fix for memory over read in TLS CBC
     decryption.
   * Sync with Ubuntu (closes: #895250).
 
   [ Matthias Klose <doko@ubuntu.com> ]
   * On armhf, configure with --cpu=armv7. Using the procinfo processor name
     is plain wrong.
   * Only pass --disable-neon to the configure when building on armel or armhf.
   * Don't hard code the vendor information.

botan (2.4.0-5) unstable; urgency=high

   * Backport security fix for invalid wildcard match (closes: #894648).
   * Backport fix for validation tests due to test certs had expired.

botan (2.4.0-4) unstable; urgency=medium

   * Backport upstream fix for disabling NEON (closes: #893372).
   * Backport upstream fix for Python3 module support (closes: #893730).
   * Make python3-botan architecture any.

botan (2.4.0-3) unstable; urgency=medium

   * Disable NEON intrinsics for ARM* builds.
   * Use upstream patch for Hurd FTBFS fix.
   * Really use the distribution-info switch for configure.

botan (2.4.0-2) unstable; urgency=medium

   * Don't remove .doctrees from the manual if it doesn't exist.
   * Don't specify parallel to debhelper.

botan (2.4.0-1) unstable; urgency=low

   * Initial upload (closes: #884130).